MAL-2025-168164 Malicious code in tealove-coki1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f2165aa2c5a3abd122d1a542037c72e81a01d02ad22aad35a47e8be75b4032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164499 Malicious code in polymeria-miod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd07b443266a3ee614bfdac702308c38d2ccec0d33c06b7932c8dd2d18ab125a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166938 Malicious code in teagood-lokika70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089ebb42ad2c6b5c31b07f41e883523feb082c233d385d4a445443f26d73bb32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153766 Malicious code in bintang-tea19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8840d6e409a6024d7c715aecda69849daeef0eddd9fc69710bfcdd74f821e590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165398 Malicious code in sabua-muhyu-tanadafiadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0afccd5973d95b11749880ee3300f738440ef516cae9457d47b72d5ecf280c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aya-auioanyaugial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 103707bb8656e64ce0cec2c8877937db4dd9990f5b800727cb82eea40b6cf064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5cd3e314f699d6d3b04324a896998cdeffe83cfd404917bbf22171eea1b123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b23e7597444bb8222442d256456bdee8ae32dbfc1cb1519a5708c812c98a3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-alvabai-aytbuta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b443a50575f15f36d2d811dbeb461031d4f874c6b3df48c238368d81c952c8ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b711d4c85fa9ebac2673636dcd60795907e615de71070ef873e49867bf707edb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-fofgaf-gafsaaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a2a26bcca299784a0f8d243f1552255eef3a68807ad1f9f5a0178fa9ea7e7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f4c3cedd79f4c786010d0fa1857fd8ec3dd07273240db7f5c5baac404b2b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 680a99a9bea0966e451bff5e9da05ed590339a577a57a350be05431651b4a5b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc28cc48d7560fc5ed626b9118cea1e5ca2d6f0d2f1ee75e1c85f3037c1cfd62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfb2547d817fc0dc5c829a10689e072f321cb0efec8fc06f48c7b5c7ad76924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af83be92a4d78539a7b8b449ac1e8611de2926a3f0bc712b25a06a749ca5054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161651 Malicious code in nabuf-otomabin-nojau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9cea356af4d02c28db8a77caff74a1708950441e16fbf8a2c6635277a4807b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154547 Malicious code in dian-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273f48b3e2c92a516a2122517ea928e069cef2cbde80852286ec7ad785f1fb99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166732 Malicious code in teaa-reborn35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a8a6fc7fd13dff20f831cdcd2128eb352bc526b395a06365fd3a1424dd83fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169901 Malicious code in uinsu-losit-bisauka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84fcf01133dc39ecd0a488530b79f95e39e987205f38895615c33d36372bfb6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...